sonarqube — Claude Code plugin: what it does, how to install
Brings SonarQube code quality and security checks directly into the agent coding workflow. Catches bugs and leaked secrets during development.
/plugin install sonarqube@claude-plugins-official
/plugin marketplace add anthropics/claude-plugins-community
/plugin install sonarqube@claude-community
/plugin marketplace add anthropics/claude-plugins-officialWhat sonarqube does
This plugin injects SonarQube analysis right into local agent sessions. Hooks inspect modified files immediately after edits, screening against 7,500+ issue categories across 40+ programming languages. Before files reach the model, an inspection layer intercepts 450+ sensitive token patterns to block secret leakage.
Running the plugin requires a SonarQube instance (Cloud, Server, or Community Build), the sonar CLI, Node.js, and an active container engine like Docker, Podman, or Nerdctl. Without an available container runtime, the MCP server cannot launch. Setup is completed with /sonarqube:sonar-integrate or by running sonar integrate claude.
What it helps with
- Stop API tokens and passwords from entering LLM context
- Spot bugs and security flaws right after an agent edits a file
- Verify quality gate status before committing changes
- Inspect project test coverage and duplication numbers
Example prompts for the agent
- /sonarqube:sonar-quality-gate
- /sonarqube:sonar-integrate
- Check my code for open SonarQube issues and show coverage findings
How to install sonarqube
Plugin marketplace
/plugin install sonarqube@claude-plugins-official/plugin marketplace add anthropics/claude-plugins-community/plugin install sonarqube@claude-community/plugin marketplace add anthropics/claude-plugins-officialCommand from the source
copilot plugin install sonarqube@awesome-copilotStep by step, with commands for each platform: Claude Code plugins: marketplaces, installing, and building your own
Questions about sonarqube
How do I install sonarqube in Claude Code?
Add the marketplace using /plugin marketplace add anthropics/claude-plugins-official, then run /plugin install sonarqube@claude-plugins-official.
What prerequisites are needed before installation?
You need a SonarQube account, the sonar CLI binary, Node.js, and a container engine such as Docker, Podman, or Nerdctl.
How does secret scanning work in this plugin?
The pre-tool hook blocks over 450 secret patterns from reaching the model before tool calls execute.
